[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxSR_riV8ePWhXcSORSFvTGRTfRgR4FciNbDX4wDmiLs":3,"g5a-risk:CVE-2021-22729":192},{"success":4,"data":5,"meta":190},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":80,"references":81,"referencesCount":87,"weaknesses":88,"weaknessesCount":87,"isActivelyExploited":97,"cisaInfo":27,"otxData":27,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":188,"notableEvents":189},"CVE-2021-22729","What is CVE-2021-22729?","A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 \u002F EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 \u002F EVF2 \u002F EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized administrative privileges when accessing to the charging station web server.","A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 \u002F EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 \u002F EV...","2021-07-21T15:15:14.753","2021-07-28T14:31:27.127",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.0176,[37,37,37,37,37,37,37],"Critical",[41,46,50,53,56,59,62,65,68,71,74,77],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"schneider-electric","evlink_city_evc1s22p4_firmware","*","cpe:2.3:o:schneider-electric:evlink_city_evc1s22p4_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"evlink_city_evc1s22p4","-","cpe:2.3:h:schneider-electric:evlink_city_evc1s22p4:-:*:*:*:*:*:*:*",{"vendor":42,"product":51,"version":44,"criteria":52,"vulnerable":4},"evlink_city_evc1s7p4_firmware","cpe:2.3:o:schneider-electric:evlink_city_evc1s7p4_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":54,"version":48,"criteria":55,"vulnerable":4},"evlink_city_evc1s7p4","cpe:2.3:h:schneider-electric:evlink_city_evc1s7p4:-:*:*:*:*:*:*:*",{"vendor":42,"product":57,"version":44,"criteria":58,"vulnerable":4},"evlink_parking_evw2_firmware","cpe:2.3:o:schneider-electric:evlink_parking_evw2_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":60,"version":48,"criteria":61,"vulnerable":4},"evlink_parking_evw2","cpe:2.3:h:schneider-electric:evlink_parking_evw2:-:*:*:*:*:*:*:*",{"vendor":42,"product":63,"version":44,"criteria":64,"vulnerable":4},"evlink_parking_evf2_firmware","cpe:2.3:o:schneider-electric:evlink_parking_evf2_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":66,"version":48,"criteria":67,"vulnerable":4},"evlink_parking_evf2","cpe:2.3:h:schneider-electric:evlink_parking_evf2:-:*:*:*:*:*:*:*",{"vendor":42,"product":69,"version":44,"criteria":70,"vulnerable":4},"evlink_parking_ev.2_firmware","cpe:2.3:o:schneider-electric:evlink_parking_ev.2_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":72,"version":48,"criteria":73,"vulnerable":4},"evlink_parking_ev.2","cpe:2.3:h:schneider-electric:evlink_parking_ev.2:-:*:*:*:*:*:*:*",{"vendor":42,"product":75,"version":44,"criteria":76,"vulnerable":4},"evlink_smart_wallbox_evb1a_firmware","cpe:2.3:o:schneider-electric:evlink_smart_wallbox_evb1a_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":78,"version":48,"criteria":79,"vulnerable":4},"evlink_smart_wallbox_evb1a","cpe:2.3:h:schneider-electric:evlink_smart_wallbox_evb1a:-:*:*:*:*:*:*:*",12,[82],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fdownload.schneider-electric.com\u002Ffiles?p_Doc_Ref=SEVD-2021-194-06","Schneider-electric",[86],"Vendor Advisory",1,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-259","Use of Hard-coded Password","The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.","A hard-coded password typically leads to a significant authentication failure that can be difficult for the system administrator to detect. Once detected, it can be difficult to fix, so the administrator may be forced into disabling the product entirely. There are two main variations:\nIn the Inbound variant, a default administration account is created, and a simple password is hard-coded into the product and associated with that account. This hard-coded password is the same for each installation of the product, and it usually cannot be changed or disabled by system administrators without manually modifying the program, or otherwise patching the product. If the password is ever discovered or published (a common occurrence on the Internet), then anybody with knowledge of this password can access the product. Finally, since all installations of the product will have the same password, even across different organizations, this enables massive attacks such as worms to take place.\nThe Outbound variant applies to front-end systems that authenticate with a back-end service. The back-end service may require a fixed password which can be easily discovered. The programmer may simply hard-code those back-end credentials into the front-end product. Any user of that program may be able to extract the password. Client-side systems with hard-coded passwords pose even more of a threat, since the extraction of a password from a binary is usually very simple.","Draft","Variant","Simple",false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2021-22729? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22729, a critical severity cyber security vulnerability from 2021. A CWE-259: Use of Hard-coded Password vulnerability exi...","CVE-2021-22729, CVE-2021-22729 vulnerability, CVE-2021-22729 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, schneider-electric security, evlink_city_evc1s22p4_firmware vulnerability, evlink_city_evc1s22p4 vulnerability, evlink_city_evc1s7p4_firmware vulnerability, evlink_city_evc1s7p4 vulnerability, evlink_parking_evw2_firmware vulnerability","\u002Fwhat-is\u002Fcve-2021-22729",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22729","Cybersecurity","CVE-2021-22729, CVE-2021-22729 vulnerability, CVE-2021-22729 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,138,148,158,168,178],{"Operator":126,"Negate":27,"Nodes":127},"AND",[128,134],{"Operator":129,"Negate":27,"CPEMatch":130},"OR",[131],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"28E02076-32CB-4729-B7D1-ACD0A5344A67","r8_v3.4.0.1",{"Operator":129,"Negate":27,"CPEMatch":135},[136],{"Vulnerable":27,"Criteria":49,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AA9F3DA4-C027-4210-8A2B-87121373CE60",{"Operator":126,"Negate":27,"Nodes":139},[140,144],{"Operator":129,"Negate":27,"CPEMatch":141},[142],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"243AD74C-064A-49E4-9233-296C090AF0FB",{"Operator":129,"Negate":27,"CPEMatch":145},[146],{"Vulnerable":27,"Criteria":55,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C224B6C5-BCA4-400A-A50E-017843825356",{"Operator":126,"Negate":27,"Nodes":149},[150,154],{"Operator":129,"Negate":27,"CPEMatch":151},[152],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"3B6C21FB-1F08-4E28-81A8-489B7A64D1AA",{"Operator":129,"Negate":27,"CPEMatch":155},[156],{"Vulnerable":27,"Criteria":61,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"58F33653-E41D-499A-BD44-0D294C003D7B",{"Operator":126,"Negate":27,"Nodes":159},[160,164],{"Operator":129,"Negate":27,"CPEMatch":161},[162],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"8EB862A8-30DC-4CCF-B88D-853CCC045080",{"Operator":129,"Negate":27,"CPEMatch":165},[166],{"Vulnerable":27,"Criteria":67,"MatchCriteriaID":167,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B266B002-6C10-4E0B-B14C-9C0A55070CD8",{"Operator":126,"Negate":27,"Nodes":169},[170,174],{"Operator":129,"Negate":27,"CPEMatch":171},[172],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"91F956D0-DFA0-4E31-88F8-DCB304CDF794",{"Operator":129,"Negate":27,"CPEMatch":175},[176],{"Vulnerable":27,"Criteria":73,"MatchCriteriaID":177,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"84800086-3C16-4C24-B64C-C9959089F903",{"Operator":126,"Negate":27,"Nodes":179},[180,184],{"Operator":129,"Negate":27,"CPEMatch":181},[182],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":133,"VersionEndIncluding":27},"B910950C-FF66-47D6-B951-A0EC8556E2F5",{"Operator":129,"Negate":27,"CPEMatch":185},[186],{"Vulnerable":27,"Criteria":79,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CC5D698C-6161-4F6D-94CE-01A0ECA95C47",[],[],{"lastModified":11,"cacheTime":191,"version":33},1792386863859,{"score":193,"band":194,"action":195,"scoredAt":196},54,"Medium","Plan remediation","2026-10-16T06:51:36.735451+00:00"]